5 results (0.007 seconds)

CVSS: 9.8EPSS: 41%CPEs: 17EXPL: 16

06 Oct 2007 — Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0.257, allow remote attackers to execute arbitrary code via (1) a long service attach request on TCP port 3050 to the (a) SVC_attach or (b) INET_connect function, (2) a long create request on TCP port 3050 to the (c) isc_create_database or (d) jrd8_create_database function, (3) a long attach request on TCP port 3050 to the (e) isc_attach_database or (f) PWD_db_aliased function, or unspecifi... • https://www.exploit-db.com/exploits/16843 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 7.5EPSS: 5%CPEs: 9EXPL: 4

01 May 2004 — Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows remote attackers to cause a denial of service (crash) via a long database name, as demonstrated using the gsec command. • https://www.exploit-db.com/exploits/303 •

CVSS: 7.8EPSS: 0%CPEs: 7EXPL: 2

20 Mar 2004 — The admin.ib file in Borland Interbase 7.1 for Linux has default world writable permissions, which allows local users to gain database administrative privileges. • http://secunia.com/advisories/11172 •

CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 3

02 Apr 2003 — gds_lock_mgr in Borland InterBase allows local users to overwrite files and gain privileges via a symlink attack on a "isc_init1.X" temporary file, as demonstrated by modifying the xinetdbd file. • https://www.exploit-db.com/exploits/21865 •

CVSS: 10.0EPSS: 3%CPEs: 4EXPL: 2

12 Feb 2001 — Backdoor account in Interbase database server allows remote attackers to overwrite arbitrary files using stored procedures. • https://www.exploit-db.com/exploits/20537 •